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UNCLASSIFIED 


FEDERAL BUREAU OF INVESTICATION 


Precedence: ROUTINE 


Data: 02/06/2009 


To: Chicago Attn: North RA 

From: Washington Field 

CR-a7 / NVRA, 

Contact : SA 


i^roved By: | 

j _ D€ 

Drafted By: I \ 

Case ID #: 288A'WP-238943 {Pending} 

Title; UNSUB (S) ; 

US COURTS - VICTIM? 

COMPUTER INTRUSION - OTHER 


Synopsis: To eat lead to locate Aaron Swartz. 


Enclosure (s) : 


Attached Is an 


Report for Swartz. 


Details: The U.s. Courts implemented a pilot project offering 

free access to federal court records through the PACER system at 
seventeen federal depository libraries. Library personnel 
naintain login and password security and provide access to users 
from computers within the library, pacer normally carries an 
eight cents per page fee. however, by accessing from one of the 
seventeen libraries, users may search and download data for free. 


Between September 4, 2008 and September 22, 2008, PACSR 
was accessed by computers from outside the library utilizing 
login information from two libraries participating in the pilot 
project. The Administrative Office of the U.S. Courts reported 
that the PACER system was being inundated with requests. One 
request was being made every three seconds. 


The login infomation was compromised at the Sacramento 
County Public Law Library {SPLL} and the Seventh Circuit Court of 
Appeals Library (SCCA) . The two accounts were responsible for 
downloading more than eighteen million pages with an approximate 
value o£ $1.5 million. 


UNCLASSIFIED 



UNC1ASSIFI£D 


To: Chicago From: Washington Field 

Re: 288A-WF-238943. 02/06/2009 


During the compromise, there was one continuous session 
with one log in and access was made every one to two seconds. 

The compromise tooh place during regular business hours. Data 
that was exfiltrated went to one of two Amazon IP addresses. 

Investigation has determined that the Amazon IP address 
used to access the PACER system belongs to Aaron Svartz. 

The following information was provided for the IP 

address : 


Name: Aaron Swartz 

Address? 349 Marshman Avenue 

Highland Park. IL 80035 
Telephone: 84?-432-$857 

A search In I l and Swartz's personal webpage 

confirmed this information. Swartz's social security account 

number is 360»84-049 3 . The telephone subscriber for telephone 
ftumberl lial I 

‘ ' * ' b7C 

NCIC report for Aaron Swartz was negative. A search 
for wages for Swartz at the Department of babor was negative - 


UNCLASSIFIED 
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UNCLASSIFIED 


To: Chicago From: Washington Field 

Re: 288A-WF-213943. 02/06/2009 


LEAD(fl) : 

Set Lead 1: (Action) 

CHICAGO 

AT WORTH RA 

Washington Field Office requests that the North RA 
attempt to locate AARON SWARTZ, his vehicles, drivers license 
information and picture, and others, at 349 Marshman Avenue, 
Highland Park, IL 60035. Since SWARTZ is the potential subject 
of an ongoing investigation, it is requested that SWARTZ not be 
approached by Agents. 

If there are anv questions or concerns, please contact 


UNCLASSIFIED 


3 



(Rev U-0I-200B1 


UHCIASSIFIZD 

FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 02/06/2009 

To: Chicago Attn: SSA | 1 

From: Washington Field 

CR-17 / NVRA 
Contact: Sk\ 


improved By: | | 

Drafted By: I I >~ 

» , 

Case ID ft: 288A'WF-233943 (Pending) 

Title: UNSUE (S) ; 

US COURTS - VICTIM; 

COMPUTER INTRUSION - OTHER 


Synopeie: To set lead to locate Aaron Swartz. 

Enclosure (s) : Attached is anl 


Report for Swartz. 


Details: The U.S. Courts implemented a pilot project offering 

free access to federal court records through the PACER system at 
seventeen federal depository libraries- Library personnel 
maintain login and password security and provide access to users 
from computers within the library- PACER normally carries an 
eight cents per page fee, however, by accessing from one of the 
seventeen libraries, users may search and download data for free. 


Between September 4, 200$ and September 22, 2008, PACER 
was accessed by computers from outside the library utilizing 
login information from two libraries participating in the pilot 
project- The Administrative Office of the U.S. Courts reported 
that the PACER system was being inundated with requests . One 
request was being made every three seconds. 

The login information was compromised at the Sacramento 
County Public Law Library (SPLL) and the Seventh Circuit Court of 
Appeals Library (SCCA) , The two accounts were responsible for 
downloading more than eighteen million pages with an approximate 
value of 51. S million. 


UNCLASSIFIED 



UNCLASSIFIED 


To: Chicago From: washlngcon Field 

Re; 288A-WP-23S943, 02/06/2009 


During the compromise, there was one continuous session 
with one log in and access was made every one to two seconds . 

The compromise took place during regular business hours. Data 
that was exflltrated went to one of two Amazon IP addresses. 

Investigation has determined that the Amazon IP address 
used to access the PACER system belongs to Aaron Svartz . 

The following information was provided for the IP 

address: 


Name: Aaron Swartz 

Address: 349 Marshman Avenue 

Highland Park, IL S0035 
Telephone : 847-432-8857 

I 1 ‘ 

A search in| | Swartz's personal webpage 

confirmed this information. Swartz's social security account h 

number is 360-64»049 3 . The telephone subscriber for telephone 
number l 1 i3 | ~[ 

NCIC report for Aaron Swartz was negative . A search 
for wages for Swartz at the Department of Labor was negative. 


UNCLASSIFIED 
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UKCLXSSIPISD 


To: Chicago From: Washington Field 

Re: 288A-WP- 238943, 02/06/2009 


LEAD (s> : 

Set Lead 1: (Action) 

CHICAGQ 

AT CHICAGO. ILLINOIS 

Washington Field Office requests that Chicago attempt 
to locate AARON SWARTZ, his vehicles, drivers license information 
and picture, and others, at 349 Marshman Avenue, Highland Park. 

IL 60035- Since SWARTZ is the potential s\ibject of an ongoing 
investigation, it is requested that swartz not be approached by 
Agents. 

, If ther-e are anv cmftgf.innfl nr rnnpprng , pLease COntaCt 

SA^ 


♦ 4 


UNCLASSIFIED 





UNClASSXPtED 

FEDERAL BUREAU OP INVESTIGATION 


Precodence: ROUTINE Date: 02/24/2009 

To: Waahinoton Field Attn: CR-17 / NVRA 

Prom: Chicago 

North RA r - 
Contact: SA 

^^proved By : 

Drafted By: | | 

Case ID «: 2d^A-WF-238943 

Title: UHSUBiS); 

US COURTS - VICTIM; 

COMPUTER INTRUSION - OTHER 

Synopsia : Lead covered by Chicago North RA 


Zncloiure<s) : Illinois DL/ID Image of Swartz and 


Details: Attempted to locate AARON SWARTZ, hia vehiclea, drivers 

license infonoation and picture, and othera at 149 Marshman 
Avenue, Highland Par)c. IL 60035. 

Successfully located drivers license photo for SWARTZ. 

Drove by address in an attempt to locate SWARTZ or vehicles 
related to the residence, but was unsuccessful. House is set on 

a deep lot, behind other houoeo on Marohman Avenue. This is a 

heavily wooded, dead-end street, with no other cars parked on the 

road making continued surveillance difficult to conduct without 

severely increasing the risk of discovery. However, drivers u-«r 

license and ^~ l information lists address above. Other 

family members are listed a s current resi dence and four vehicles 

are currently registered to I I who resides at above > * • 

address . Illinois database cnecKS ror sWARTZ yielded negative 

results. SWARTZ has no arrests, no registered vehicles or 

property. 


UNCLASSIFIED 




UNCLASSIFIED 


To: Washington Field From; Chicago 

Re; 2SeA-WP- 230543 , 02/24/2009 


Chicago considers this lead covered - 


UNCLASSIFIED 
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UNCLASSIFIED 


To: Washington Field Fron: Chicago 

R«: 288A-WP'239d4d. 02/24/2009 


LEAD(fl) : 

Set Lead 1: (Info) 

WASHTNQTCN FIELD 

AT WASHINGTON DC 
Read and clear. 


♦4 


UNCLASSIFIED 
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FEDERAL BUREAU OF INVESTIGATION 


D*« of uanscttpiiqn 02/1^/2009 

AAROM SWARTZ had a profile on the website LIKRBDIK, at 
t^ww. linkedin >coin /ln/aarQGSw, SWARTZ is listed as a writer, hacker 
and activist based in the San Francisco Bay Area. SWARTZ'S 
education includes Stanford university. Sociology, 2004, SWARTZ ' s 
experience includes the following: 

Pounder of watchdog.net 

2008 - Present 

Tech Lead at Open Library 

2007 - Present 

Co- founder of reddlt 

November 2005 - January 2007 

Metadata Advisor at Creative Commons 

2002 - 2004 

Member of RDF Core Working Group 

1999 • 2000 

Member of W3C 

1999 - 2000 

The website watchdog.net; the good government site with 
teeth states that "We're trying to build a hub for politics on the 
Internet". This plan includes pulling all information about 
politics, votes, lobbying records, and campaign finance reports 
together under one unified interface. SWARTZ posted blogs on 
07/30/2008, 06/16/2008, 09/07/2008, 04/21/2008, 04/16/2008, 
04/14/2008. 

SWARTZ has a profile on the website PACEBOOK. His 
networks include Stanford '08 and Boston, MA- The picture used in 
his profile was also used in an article about SWARTZ in THE NEW 
YORK TIMES. 

SWARTZ'S personal webpage, www. aaronsw.coin. includes a 
section titled "Aaron Swarts; a lifetime of dubious 
accomplishments". In 2007, SWARTZ began working full-time as a 


mye#o^8»<* 02/15/2009 Manassas, VA 
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CoMinuKion of FD-302 of 




member of the Long-Term Planning Committee for the Human Race 
(LTPCHR) . 





. 1 - 

rEDRKAL BtREAU OF INVESTIOATION 


b6 

b-?C 


Dwe of tfa«cnp(itfn Q2/19/_2-Q-Q-9^ 

On Pebruarv 17/ 2000/ | reeeivad an email from 

I Administrative Office <bt th6 US Courts, with links 
to two pubiisned articles regarding the compromise of Che PACER 
system. 

On February 12, 2009, I I published an article 

in THE NEW YORK TIMES titled "An Effort to Upgrade a Court Archive 
.qvRt^m tr> Free and Easv" . For the article. I I Interviewed 

' l and AARON SWARTZ regarding the compromise of the PACER 

system. 

The following information is found in the article: 

I ~| urged fellow activists to go to the seventeen 

libraries offering the free trial, download as many court documents 
as they could, and send them to him for republication on the Web. 

SWARTZ rea di l appeal and downloaded an estimated 

twenty percent (20%) of the PACER database. 

I I a Government Printing Office official, 

told librarians that the security of the PACER service was 
compromised and the FBI was conducting an investigation. 

Lawyers for | j and SWARTZ told them they had broken 

no laws . 

On February 13, 2 009. f~ I and I . I 

published an article in The LED2, NOTES ON THE NEWS, FROM THE NSW 
YORK TIMES titled "Steal These Federal Records - Okay. Not 
Literally" . 

The following information is found in the article: 


i published an online manifesto about freeing PACER 
e called for a Thumb Drive Corps to go to 
libraries with small thumb drives, plug them into computers, 
download as many court documents as they could, and send them to 
^ 80 that he can translate them into a format that GOOGLE' e 
search software can read. 


OA 02/17/2009 WanaBsas, VA 

PH# « 2eflA-WF-238943 om N/A 

W SAI I 


Tin* cenuins t«o3mmeno»ori« net MAdvMn« of (^o Flu n d in* 0fo&»rrr oi Vd Ffii aog d » you agency, 

ind itl Mniant* ai9 roi lo M flitinbuWO ouEid* yMf 



F[>J02s (Rev. 


28SA-WF-238943 


CdfttrtuMJOft of FD-302 of _ , < ^/17 /2Q(39 . P*t« ^ 

SWARTZ received software that downloaded documents from 
the PACER database from I ~l at the BBRKMAN CENTER FOR 

INTERNET AND SOCIETY AT HARVARD. SWARTZ improved this software, 
saved it on a thumb drive, and had a friend in California take the 
thumb drive to one of the free libraries and upload the program. 

When the PACER system was shut down with no notice, 

I ~ told SWARTZ "You need to talk to a lawyer. I need to talk 

to a lawyer . " 

Lawyers told ! I and S WARTZ tha t they appeared to 

have broken no laws. At that point, I I sent SWARTZ a text 

message saying "You should just lay low for a while." 



FD-302(Re« 


- 1 . 

FEDERAL BUREAU OF INVESTIGATION 


Dale of mfiscriKton Q3/Q9/2QD9 

AARON SWARTZ posted a weblog titled "NYT Personals" at 
http: //WWW. aaronsw. com/we blog. In the weblog, SWARTZ quotes the 
NEW YORK TIMES article in which he was interviewed. SWARTZ also 
posts "Want to meet the man behind the headlines? Want to have the 
p.BI. Open up a file on you as well? Interested in some kind oi 
bizarre celebrity product endorsement? I'm available in Boston and 
New York all this month". 


inyta»»8»>fi on 03/09/2009 Manassas, VA 
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FEDERAL BUREAU OF INVESTIGATION 


Dw of 03i«r^iofl Q3/23/20Q9 


On March 10, 200$, 
OFFICE OF THE OS COURTS (tJS 
Information; 


COURTS } proviQ^ 


of THE ADMINISTRATIVE 
the following 


US COURTS was relying on the Notice written on the login 
page of the PACER webpage, pacer.uscourta.gov, to advise users that 
unauthorised access to the PACER system is not allowed. When a 
user goes to the webpage and navigates to the login page, a Notice 
is shown at the bottom of the page that states "'NOTICE: This is a 
Restricted Government web Site for official PACER use only. 
Unauthorized entry is prohibited and subject to prosecution under 
Title 18 of the U.S, Code. All activities and access attempts are 
logged . " 


when asked to clarify how a user knows what constitutes 
unauthorized access and how a user would have known that they had 

to be in one of the seventeen libraries to access PACER, | 
ha d I prepare a response. 

I provided the following information: 

AARON SWARTZ would have known his access was unauthorized 
because it was with a password that did not belong to him. 

Library patrons did not sign up for accounts. One Icgin 
and password were provided to each Federal Depository Library. 

Each library agreed to not share the password with any organization 
or individual user. Verification forms were signed by Depository 
Coordinators at each library and included statements regarding 
login and password security. 

The Seventh Circuit Court of Appeals in Chicago had a one 
hour time liruic on their public access computer and the computer 
was completely logged off after each session by a staff member. 

(PACER homepaqa and login page print -outs, emails from 

~ and n I and Federal Depository Library /PACER 

Verification Forms are attached.} 


on 03/10/2009 Hanasgas, VA 

FKe • 288A-WF-238943 N/A 

by SA 

TM eerie«i^$ noime* r«ce<(wn«riasuen« nw eonouFtom « l^a fsi h is nt prep«<T< ut* fqi imam to your agorwry; 

il ario (S Boritoma ara not lo M oisirWutM otftiiaa yeur 


bs 

bTC 

bfF 



FD-}02<Rcv I04-9S) 


FEDERAL BUREAU OF INVESTIGATION 


D4ie of BWBcnpuoft 04/14 /2Q09 

On 04/14/2009, Sa| tailed 1847) 432-88S7 in an 

attempt to speak to AARON SwAKTZ . ^TTemale answered the telephone 
and stated that SWARTZ was not available at that telephone number 
any longer and that sv pRTZ did n ot have another number where he 
could be reached. SA I I left a message tor SWARTZ to return 

her call and the female stated that she would email that message to 
SWARTZ . 


SWARTZ called SA | l and left a message on her 

voicemail stating he could oe reacnea at (847) 877-8895. This 
number is a T-Mobile cellu lar number and returned negative results 

I I 


5A | [ spoke to SWARTZ, at telephone number (847) 

877-8895, ana explained that the FBI id looking for information on 
how SWARTZ was able to compromise the PAGER system so that the US 
COURTS could implement repairs to the system and get PACER running 
again. SWARTZ Stated t hat he woul d have to talk to his attorney 
first and would call SA| [back at a later time. 


nv*M4«tPMi «t) 04/14/2009 «t Manassas, VA 

• 288A’WF-238943 

Py SAj I 


Da(* dtcutM N/A 
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D«e of iraftsctipton 04/15/2QQ9 


£a\ {14/15/2009, Sa[ 


I who had left a 
telephon e number is 


3 




I returned a telephone 
nirpmaS l meg aaq g for SA[ 


call to 


1 


and his email address 


]asked if the FBI had an official invAgtiga n r,n 
open or if this was just information gathering. \ 
responded that there was an open inveat iqatinn. | 


he 


'k[ 





asked if 


res pon ded cha^ She could not 


needed an attorney and SA 
advise him on that matter - 
SWARTZ was told in a conversation yesterday that we are looking for 
information into how the compromise occurred so that the US COURTS 


ispond 

>old[ 


] that AARON 


can get PACER operational again. \ 


tell you how Aaron did it." T I was a 

understands the security system of FACER arid 41n speak to Cftat. 


t reaponded with "I can not 

and 


inv€*iig8iM«i Oft 04/15/2009 at Manassas, VA 

F** « 2BBA-WP-23S943 

ey SA| ^~| 


0»U N/A 
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FEDERAL BUREAU OF INVP.STJGATJON i'T 


On 04/16/2009. SaI 


Dw or inosaiption Q4/16/2009 
lr_e turned a telephone call to 


fwantea assuran?^ CUC if tiWAKT«i W3iS 


in 




tJQgCOft. HA. I 

what he said would not be used to ieopardize him. SA 
explained that assurance coul d not be given but that we were in an 
information gathering phase, i | refused the interview without 
the assurance. I I 


wwKflWso on 04/16/2009 at Manaaaas, VA 

* 298A»WF»238$43 Don <r«ut«o N/A 

SAI I 


TIW ooouinont ooWaw# neither re»rim*noibon» nor conetg»ien$ oi m FBI II le M profiofty oi no b^i ana u laei^es m vovf egoACv 
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FEDERAL BUREAU OF INVESTIGATION 


Prec«d«nce: ROUTINE Data: 04/20/2009 

To: Cyber Attn: Cia »l/SSAl 

SSA 


Washington Field 

Fron: Washington Field 

CR-17 / NVRA^ 
Contact: SAL 

improved By: i 


Drafted By: 


Case ID #: 2ddA-WF-236943 (Closed) 

Title: UNSUB (S) ; 

US COURTS - VICTIM; 

COMPUTER INTRUSION - OTHER 

Synopsis: To close case. 

Details: For background, the U.s. Courts implemented a pilot 

project offering free access to federal court records through the 
PACER system at seventeen federal depository libraries. From 
September 4-22, 2008, PACER was accessed by computers from 
outside the library utilising login information from two 
libraries participating in the pilot project. The login 
information was compromised at the Sacramento County Public Law 
Library and the Seventh Circuit Court of Appeals Library. The 
tirfo accounts were responsible for downloading more than eighteen 
million pages with an approximate value of $1.5 million. 

Inveatigation determined that the Amazon IP address 
used to access the PACER system bel ongs to Aaron Swartz. Swartz 
refused an interview with the FBI. | 

I I Swartz on his website pacer . resource. org, 

was interview oy cne FBI on April 15, 2009. Both Swartz and 
I k ere interviewed by the New Vork Times, regarding the 

compromise of the PACER system. 


UNCLASSIFIED 


UNCLASSIFIED 


To: Cyber From: WashingCon Field 

Re: 288A-WP-23$9^3, 04/20/2009 


CCIFS Attorney I I closed the office's case. 

Based on the CCIPS closing, Washington Field is closing this case 
as of this comnunication . 


UNCLASSIFIED 



UNOASSIFIED 


To: Cyber From: Washington Field 

Re: 288A-WP-238942. 04/20/2009 


LCAD<») : 

Set Lead 1: (Info) 

CYBER 


AT cm«i 
Read and clear. 


♦♦ 
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